• That looks good. As long as I can identify which permissions differ between two groups.